Security & Safety

Designed for teacher-directed classroom use.

My Class Place combines account protections with simple classroom boundaries: teachers create the classes, teachers control the tools, and students enter only through a class code and assigned PIN. No mystery visitors, no student social feed, and no tiny humans running the admin panel.

Adult-created access

Teachers create classes and student entries. Students do not independently create teacher accounts, public profiles, or open classroom communities.

Limited student entry

Students use a class code and their assigned PIN to reach the student tools connected to that class.

Teacher-controlled displays

Teachers decide when public boards are opened and which classroom content is shown on a projected or shared screen.

Account protections

My Class Place uses multiple safeguards intended to reduce unauthorized account access and common website attacks. Current protections include:

  • Email verification for new teacher registrations.
  • Password-reset links delivered through the verified account email workflow.
  • Passwords stored using secure password hashing rather than readable plain text.
  • Secure session settings and session renewal during login.
  • Rate limiting for repeated failed teacher and student login attempts.
  • Request-validation protections on sensitive forms to help block unauthorized submissions.
  • Role and ownership checks that separate teacher, administrator, student, and public-display access.
  • Administrative activity records for selected high-impact account and system changes.
  • Private configuration files kept outside the publicly served website folder where hosting permits.

Student access is intentionally simple

Students join through a class code and an individual PIN assigned by the teacher. A student does not need an email address, does not manage a paid account, and does not receive access to teacher controls.

A class code identifies the classroom. The PIN identifies the student entry within that classroom. Teachers should avoid posting codes and PINs publicly and should reset access information when they believe it has been shared inappropriately.

Teacher oversight is part of the design

  • Teachers create and manage rosters.
  • Teachers decide which tools are active and when students can use them.
  • Teachers create prompts, request types, schedules, challenge names, badges, rewards, and other classroom content.
  • Teachers can start, pause, resolve, end, archive, reset, or delete information where the selected tool provides those controls.
  • Public displays are opened by the teacher and are separate from teacher-management pages.
Technology assists supervision; it does not replace it. Teachers should continue using normal classroom monitoring, school rules, and professional judgment while a tool is active.

Public boards and projected screens

Public views are designed for classroom display, but “public” means visible on the display link, not appropriate for publishing confidential information. Teachers should review student names, prompts, schedule labels, uploaded images, rewards, and challenge content before projecting them.

Teachers should close public-display tabs when they are no longer needed and avoid leaving a classroom display open on an unattended device.

Safe content and classroom use

My Class Place provides teacher-created classroom tools. Teachers are responsible for ensuring that uploaded images, prompts, names, rewards, schedules, and other entries are age-appropriate, respectful, accessible, and permitted by school policy.

  • Do not use a tool to shame, rank, or publicly embarrass a student.
  • Do not place medical, disability, disciplinary, or other sensitive case information on a public display.
  • Use neutral labels when a projected name or request could reveal private information.
  • Review custom images before using them in Flow or another visible classroom area.
  • Use Queue and Noise settings in ways that support classroom routines rather than replace individual accommodations or safety plans.

Payments and account access

Teacher subscriptions are processed through PayPal. PayPal handles payment credentials and billing authorization. My Class Place receives the subscription information needed to determine account access, such as plan, status, and relevant billing dates.

When access expires, the service is designed to restrict classroom tools while preserving access to appropriate account and subscription pages. Teachers should still keep their own copies of records they are required to retain.

What teachers can do to help

  • Use a unique password that is not shared with another website.
  • Keep the teacher login separate from student devices and browsers.
  • Sign out on shared computers.
  • Keep class codes and student PINs within the intended classroom community.
  • Remove students who no longer need access.
  • Review public displays before projecting them.
  • Report unexpected account activity or access problems promptly.

Security is ongoing

No website can promise that risk is zero. My Class Place will continue reviewing safeguards, correcting identified problems, and improving protections as the service grows.

This page describes current design and security practices. It does not claim third-party security certification, independent audit status, or guaranteed compliance with every school, district, state, federal, or international requirement.